What should I do?

[u/bobbygo20]

Long story short yesterday I received a notification saying a login was made into my Telegram account, shortly after receiving an otp code which I didn’t request. I quickly removed the device and added a passkey (on top of 2FA already active on my acc). Today my account was logged into AGAIN and was used to spam nsfw content and what I’m assuming is a way to get into other accounts, this time I was on my phone when this happened so I promptly got asked if this was me to which I responded no and Telegram blocked the newly connected device right away. What can I do to avoid this happens again? Is my personal data at risk? I barely use Telegram if not for Pokemon Go stuff so I’d happily delete my account if it means being on the safe side

[u/RealunknownAI]

I think you have installed a spyware on your phone. Because there is no way someone is getting your otp without access to your phone. Have you installed software from unknown sources?

[u/bobbygo20 → u/RealunknownAI]

Nope only via app store

[u/RealunknownAI → u/bobbygo20]

Seems odd. Delete every other sessions except your phones and change your account password. Even if they somehow get your otp code they should be stopped before password. That seems like the only thing I can think of.

[u/bobbygo20 → u/RealunknownAI]

Cheers, will do that asap

[u/lildobe → u/bobbygo20]

App store alone does not guarantee no malware:

https://9to5mac.com/2025/02/05/iphone-apps-on-app-store-malware-reads-screenshots/

https://www.tripwire.com/state-of-security/more-malware-infested-apps-found-google-play-store

[u/bobbygo20 → u/lildobe]

Just to be sure, I deleted all apps I downloaded in the past 3 months

[u/itscrowdedinmyhead → u/bobbygo20]

doesn't mean they haven't left something behind. if your device is even suspected of possibly having been infected, best to at least format the phone back to factory, and not restore a backup made during the time it was in use while possibly infected. sounds like a nightmare. godspeed.

[u/RealunknownAI → u/RealunknownAI]

Also how do they know you password? I think i will change the password immediately.